{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "ransom", "trigger": true, "arguments": ["victim", "payment method", "time", "attacker", "place", "price", "damage amount", "attack pattern"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["vulnerable system", "supported platform", "patch", "common vulnerabilities and exposures", "vulnerable system version", "vulnerability", "releaser", "patch number", "issues addressed", "time"]}, {"event_type": "phishing", "trigger": true, "arguments": ["tool", "place", "trusted entity", "attacker", "victim", "time", "purpose", "attack pattern"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["common vulnerabilities and exposures", "time", "supported platform", "discoverer", "vulnerable system version", "vulnerable system", "vulnerable system owner", "capabilities", "vulnerability"]}], "input": "A second invoice impersonation attack uses the subject ' My current address update ' and claims to contain information from a trusted contact about a change of address , along with details of a new invoice ."}
{"ransom": [], "patch vulnerability": [], "phishing": [{"trigger": "claims to contain", "arguments": {"tool": "NAN", "place": "NAN", "trusted entity": "a trusted contact", "attacker": "NAN", "victim": "NAN", "time": "NAN", "purpose": "NAN", "attack pattern": "invoice impersonation attack"}}], "discover vulnerability": []}